fix hcp jwt parsing

ni · Apr 4, 2023 · fdc45f2 · fdc45f2
1 parent 8269c4b
commit fdc45f2
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/azuredevops/provider.go b/azuredevops/provider.go
@@ -410,7 +410,15 @@ func getAuthToken(ctx context.Context, d *schema.ResourceData) (string, error) {
 			tenantIdApply := d.Get("sp_tenant_id_apply").(string)
 
 			workloadIdentityTokenUnmarshalled := HCPWorkloadToken{}
-			err := json.Unmarshal([]byte(workloadIdentityToken), &workloadIdentityTokenUnmarshalled)
+			jwtParts := strings.Split(workloadIdentityToken, ".")
+			if len(jwtParts) != 3 {
+				return "", errors.New("Unable to split TFC_WORKLOAD_IDENTITY_TOKEN JWT")
+			}
+			tokenClaims, err := base64.StdEncoding.DecodeString(jwtParts[1])
+			if err != nil {
+				return "", err
+			}
+			err = json.Unmarshal(tokenClaims, &workloadIdentityTokenUnmarshalled)
 			if err != nil {
 				return "", err
 			}